CVE-2018-20481

XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service (NULL pointer…

published December 26, 2018

CVSS
—
EPSS
3%
Percentile
88.8
In the wild
Unconfirmed
What it is

XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PDF document, when XRefEntry::setFlag in XRef.h is called from Parser::makeStream in Parser.cc.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03422 · 88.8th percentile
Published
2018-12-26T04:00Z
EPSS history
Timeline
  • 26 DEC 04:00Z
    XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service (NULL pointer…
    cvelistv5